CVE-2018-5146

CVE-2018-5146 的exp 和 poc poc.ogg ：自己构造的poc文件 cve-test2.html ：exploit文件 crctest.exe：计算ogg文件的 crc32...

ntlmv1-multi

NTLMv1 Multiherramienta Esta herramienta revierte hashes NTLMv1 a NTLM o, más específicamente, formatea las respuestas al desafío NTLMv1 en un formato que puede crackearse con el modo 14000 de hashcat. Cálculo de CT3 Si especificas --ct3, calculará los últimos 4 dígitos del NTLM por ti; si...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer 版本: 0.4 Bytes Revealer 是一款功能强大的逆向工程和二进制分析工具，专为安全研究人员、取证分析人员和开发者设计。它提供十六进制视图、可视化表示、字符串提取、熵计算和文件签名检测等功能，帮助用户发现文件中隐藏的数据。无论是分析恶意软件、调试二进制文件，还是调查未知文件格式，Bytes Revealer 都能让您轻松浏览、搜索和提取任何二进制文件中的有价值信息。 Bytes Revealer...

Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

PortexAnalyzerGUI

PortexAnalyzerGUI PortEx的图形界面，一个可移植可执行文件和恶意软件分析库 下载 发布页面 功能 头部信息：MSDOS头、Rich头、COFF文件头、可选头、节表、.NET元数据 PE结构：导入节、资源节、导出节、调试节 扫描文件格式异常并提供某些组合的反向提示 可视化文件结构、局部熵和字节图，并可保存为PNG 计算香农熵、Imphash、MD5、SHA256、Rich和RichPV哈希 覆盖和覆盖签名扫描，可转储或移除覆盖 版本信息和清单 图标提取并保存为PNG 通过Yara进行自定义签名扫描。内部签名扫描使用PEiD签名和内部文件类型扫描器。 支持的操作系统和J...

forensicscanner

This repository does not have a README...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map 使用 OpenStreetMap 和官方 Telegram 库来查找附近用户的位置。 请注意： Telegram 的 API 已更新，使得附近用户的距离精度降低，无法精确计算位置。因此，Telegram Nearby Map 会显示附近用户，但不会展示其确切位置。 灵感来源于 Ahmed 的博文 和 Hacker News 的讨论。 由 github.com/tejado 开发。 工作原理？ 每 25 秒，通过 TDLib 从 Telegram...

CVE-2022-30136

CVE-2022-30136 Windows 网络文件系统远程利用 PoC 作者：Ricardo Narvaja 仅供演示目的。完整利用程序适用于易受攻击的 Windows Server 系统。 查看分析文章 CVE-2022-30136 “Windows 网络文件系统漏洞”分析。 使用方法 对 CVE-2022-22029 “Windows 网络文件系统漏洞”的分析 我撰写本文旨在展示在开发滥用 CVE-2022-30136 漏洞的 Core Impact 利用程序“Windows 网络文件系统远程”时进行的分析过程。 1 漏洞 Windows...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 漏洞说明 JumpServer 密码重置漏洞 USAGE V2 Update 1. 全新重构 2. 新增没有接收到账户和邮箱的情况下，使用默认账户和邮箱 3. 改进对验证码的识别和计算 4. 自动修改密码 5. 屏蔽多余的logs输出 V1 计算验证码需要指定对应邮箱的用户名，运行后会自动判断是否存在漏洞，并尝试计算验证码 python CVE-2023-42820.py -t http://IP:Port -e email -u username ██████╗██╗ ██╗███████╗ ██████╗ ██████╗...

CVE-2026-104424

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...

EUVD-2026-91435

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...

CVE-2026-104424

Zebra versions prior to 6.1.0 are vulnerable to an incorrect calculation in the ZIP-317 block template selector . The flaw stems from omitting the header and transaction-count size from the block budget. An attacker can exploit this by placing valid selectable transactions into a victim miner's m...

CVE-2026-104424 Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...

httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error

A flaw was found in the moddav module of the Apache HTTP Server. This vulnerability allows a Denial of Service DoS by crashing server child processes. An attacker with permission to create Web Distributed Authoring and Versioning WebDAV locks can trigger a memory calculation error during lock...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Desbordamiento de entero en asignador de memoria kmalloc Sim Código del programa C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr ...

CVE-2026-42528

A flaw was found in the moddav module of the Apache HTTP Server. This vulnerability allows a Denial of Service DoS by crashing server child processes. An attacker with permission to create Web Distributed Authoring and Versioning WebDAV locks can trigger a memory calculation error during lock...

Linux Distros Unpatched Vulnerability : CVE-2026-42528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes...

ImpossibleTravelLogAnalysis

Análisis de Registros de Viaje Imposible por NCC Group Acerca de Herramienta básica de análisis de registros para detectar viajes imposibles mediante la información geográfica de las direcciones IP Formato de Datos Esperado Un archivo CSV con los siguientes encabezados When,User,Event,IP Con el...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...